renovate: deploy renovate on kube

kubernetes/dev/gitea/values.yaml

@@ -26,11 +26,11 @@ valkey:
                 cpu: 500m
                 memory: 256Mi
         tolerations:
-            - key: ENC[AES256_GCM,data:hYAE1TiCvNmu,iv:1UbfY6+dmo8ZBTA4HmrePwsSlI0ZAXnxxTxPSFmXeJ8=,tag:I3TojzEvwF7+VpIteoLPgA==,type:str]
+            - key: ENC[AES256_GCM,data:fXEKv6sROAEz,iv:ausWhm1zJdx+Mu26pauhi5G+ODZqLZ27SmfkAuMUtYY=,tag:cNYyeG09Hk++uED5M0TBKw==,type:str]
               operator: Equal
-              value: ENC[AES256_GCM,data:NvnKWi5ILYo=,iv:ZOqbGIaM3K/fFeuLSYDmTyYlAN4SJqDEifLQvvJfBMk=,tag:WdUrzaF+sK/4FglVlBWu2Q==,type:str]
+              value: ENC[AES256_GCM,data:7CfH8Lrr7S0=,iv:dv5f/cN1VI2NLQsAYqF2hGEjVjxTnHGXFfNQyCL1KIc=,tag:HTiQN/wZU/mXSHvaz2KqRg==,type:str]
               effect: NoSchedule
-            - key: ENC[AES256_GCM,data:HRboGXp+i1OelfWw6dMe1p4kxGyu66p9kJ1kiX7nCtL84Nc2YA==,iv:gRqCAhIOKAp1JxsC+n1V4B0bpUr6I38tjElfxiUc+T4=,tag:IveoeEyKxRUQM8uTWXa8wA==,type:str]
+            - key: ENC[AES256_GCM,data:2l4bXqCigZWkqfm6zvba/aOwC6zXYd0lufMUrrHA3YZm1/0IXw==,iv:70oryMEsl0nnZz1q4OHHHgjRswmyvLZI9Y6tk0elM5Q=,tag:2/EHDIcaDTSGWl3qRVW8oQ==,type:str]
               operator: Exists
               effect: NoSchedule
         affinity:
@@ -39,7 +39,7 @@ valkey:
                     - weight: 100
                       preference:
                         matchExpressions:
-                            - key: ENC[AES256_GCM,data:sVMARKa7p6m731vY2XqLTQgq5J0=,iv:zKofi+M+NiARpWDhCT1gP8nWg8IfnPgX/gSwy0mtvzw=,tag:saYzCUrICeHmQBblCLOGxg==,type:str]
+                            - key: ENC[AES256_GCM,data:dc00KQOBXn587h22VlooFY5ZjbE=,iv:kX5utMKu8uoUSeameD2R0iH+DU/3YXuwP8DaZs9mGYs=,tag:PM5xBnYaP84zMZ2SWTYV+A==,type:str]
                               operator: NotIn
                               values:
                                 - "true"
@@ -48,10 +48,10 @@ postgresql:
     global:
         postgresql:
             auth:
-                postgressPassword: ENC[AES256_GCM,data:F3StYRw2tfW9Sg==,iv:q4cFSPNwbYywzVoqyICtD6BjbVys2vgIJBKBQqcCVpI=,tag:+bNefltDFPSmXSDxWk0MuQ==,type:str]
-                password: ENC[AES256_GCM,data:XZBcmfCL80rc8A==,iv:uuQQCC7Yoi/W29WkOBMLQBR7dGxSNVo0mLcvQ14WPPM=,tag:GgWmz1xNtMGWc8WxdH1GdA==,type:str]
+                postgressPassword: ENC[AES256_GCM,data:3aHXAFDqpYsWeg==,iv:qbrm+izSr+PaAa4fHMVw3Yz0qMuisRMpDxVKdeFSvls=,tag:zVUVALdIUTMhxavsSxlUCw==,type:str]
+                password: ENC[AES256_GCM,data:LCfnttYbxS34WA==,iv:rqU044P/gUmqjhmu+A9B7A64ujnkIhMpKQlYpcmi8MY=,tag:XJws85qfKI+y0BV6S4L1Ig==,type:str]
                 database: gitea
-                username: ENC[AES256_GCM,data:JbRRD4A=,iv:N97mlSjqPKMlY7HKS7OPlSZ2lzAXrawu/XRwolt8CjY=,tag:WYpR5bSkOuaVZtPp9nfxDA==,type:str]
+                username: ENC[AES256_GCM,data:QDo83dk=,iv:RvuuDiiY1XLZbrjcJ/ANxb/wHrSdf1gaBSck+cMaWhY=,tag:UCEAkWZ2Dmr93oBATQdf8g==,type:str]
     volumePermissions:
         enabled: true
     primary:
@@ -63,11 +63,11 @@ postgresql:
                 cpu: 1000m
                 memory: 1Gi
         tolerations:
-            - key: ENC[AES256_GCM,data:9y7Rp0dAIqqY,iv:cEjVNUnuOEiLWAKHagGhLOfTdkMQUbLSAhSEMe3D1t8=,tag:GlORte/m/74L4h4oyta/wg==,type:str]
+            - key: ENC[AES256_GCM,data:NplaOmBekcB+,iv:qzQ+QasVZ2JMG87PgdVDJ/7XHDiDXTp+ogxB1w4tws4=,tag:aPyaqwdxVEjct7D3SuKFqw==,type:str]
               operator: Equal
-              value: ENC[AES256_GCM,data:1Llp+6Z3pw4=,iv:OdsjhjHAF/sRj3JHKbcFVJzWv4N6cQH9mQZsh03GdB8=,tag:9h6lt1CpIkVWxsS1Tw1dDA==,type:str]
+              value: ENC[AES256_GCM,data:vjsM3Li0p/8=,iv:Y+sjLHWpqwsOJV+vygG2f/3ZXQs2ZQRloPrlcOuzoeM=,tag:t+uR2/uM4NiIq6alJjio9g==,type:str]
               effect: NoSchedule
-            - key: ENC[AES256_GCM,data:WGEsa/uJmOx8jvz4QuQWr9IoQLKrs8ic9Mo5c4K8xZTSrP5vdg==,iv:0c0IK7ihVkUWe6S2bPIX8rHbZUvcNl1FKwd0RaZFlPU=,tag:EFRpAgOQnwtm8s0qu5IVdA==,type:str]
+            - key: ENC[AES256_GCM,data:LQvczGKAK2x1BbFr7S8jo0G7YUaX4DJvc+1Z2E+bCjys4PsBHg==,iv:m4Ses50zYxTF7jXTgbf9nY0kT1hrtgVEEQruLZFN8cU=,tag:UidEMRbb0IPb5V31FjWzYg==,type:str]
               operator: Exists
               effect: NoSchedule
         affinity:
@@ -76,7 +76,7 @@ postgresql:
                     - weight: 100
                       preference:
                         matchExpressions:
-                            - key: ENC[AES256_GCM,data:xD1XHWuo6myo8cV4hN4/G3mYWng=,iv:PT+xk8REvOlmmyNjMD59ot3Z1TBAHHXgKh6aYCJhn4U=,tag:kitAObeN3Xw7cwUOSnIj5A==,type:str]
+                            - key: ENC[AES256_GCM,data:D9N+Fd/g24bKikLdx4WE57WvqE4=,iv:+1oYCzAl6kBJliw0woWhhWT7aWcx4rXkGDn7Anho2Pg=,tag:R+cLK75QCIfWeGL8/eqeFA==,type:str]
                               operator: NotIn
                               values:
                                 - "true"
@@ -112,8 +112,8 @@ gitea:
     oauth:
         - name: Authentik
           provider: openidConnect
-          key: ENC[AES256_GCM,data:+U+sp9wg3RoLkJTwSQMYtDaokMl/lP33Pw0cot4Wblqcbe0P51a54w==,iv:X3ggp3GYWV1KPp67i4qhRee0GS+9Gjwg5v5APQllT+A=,tag:kUUhFgQgor8TyRnu5klwAg==,type:str]
-          secret: ENC[AES256_GCM,data:0lvc197OX1Y6vn7/klG2yUAeFXsd8VjWmboOjUZFMbHYw+uetFzPuLWBQefjKBZZdtpdsYLqtIEctZ38uZikTpCKIZjYnitnYpKermcgr9vNpzugVrkW4kuo01saWrhDlbzHlk7t1dqMoVmMgzkDjArD/3RlH/mqRxHDSVP9RY8=,iv:7y9sdpuSQy01Hmk0kZ6pGoAM+3Vj1iC+PB9ZWjuls70=,tag:KxfDrDDfV5ULxbYepPqn9A==,type:str]
+          key: ENC[AES256_GCM,data:cYaRMEtrziMJWIRj3dg1fuMpp6F3t5ZDO/H2ONOQCg/fZ8s0ZsLb6Q==,iv:VskJ+5Rwpnys0nH531FYZIj253lJqDz1l6sgwKWhE1s=,tag:F3Wj1ruwSwlC5XbVKt1aCQ==,type:str]
+          secret: ENC[AES256_GCM,data:Cro9iaXKcv+uP4G6jEX0tPBW9cjxaZUmnLEVyE72j34aeAAmDFgPiTE/VWSbD3WWK8tuErl0RFHMvHiN63f4W5hq38W9VMP31JDCUYcUbkFBmQg2hrt6ePajZZICR1gHB3D7t5av4pl13O490VByGWfr8OxAK8Z/cGojp/Pt4mo=,iv:nRvFSVRSKFvpNjGmJq6uh/JV3acLsipV0nUHAlt+t80=,tag:BZ7eJiSVCM8J+MY+I5Z48g==,type:str]
           autoDiscoverUrl: https://authentik.vhaudiquet.fr/application/o/gitea/.well-known/openid-configuration
     config:
         APP_NAME: Gitea
@@ -151,11 +151,11 @@ resources:
 replicaCount: 1
 # Failover tolerations + affinity — allow scheduling on p330 during r740 outage
 tolerations:
-    - key: ENC[AES256_GCM,data:D69ZlIyO46sb,iv:q5OSkzj4ZwQTdMWhZX0N+EJ4QEBaxVRO+J5/m7yt3cE=,tag:GhxKaHiqliw9pedhefEM5A==,type:str]
+    - key: ENC[AES256_GCM,data:1O2rrNCMxkGV,iv:dLwAP4NFVRZ0IUNzARm7hPq+ruIshtpXfUVtuuRP3/o=,tag:EmKs8LItQFLoPov8MMjfgw==,type:str]
       operator: Equal
-      value: ENC[AES256_GCM,data:gxtr284O2oU=,iv:wu1SU1I4IfbyyZXDM38CxJDDg78tGNxnz+TyIQWfUVo=,tag:GjJn1DZb0ffXeatTs0/tLQ==,type:str]
+      value: ENC[AES256_GCM,data:l0WXlDcRWaY=,iv:F3AxSbB9t/q3L6yOI4NcHlNzZrDwJqiJ/jjfLrQlNAE=,tag:6s/WqyWjNLHHmExGmgl65g==,type:str]
       effect: NoSchedule
-    - key: ENC[AES256_GCM,data:qqmHg21c6p3+xv5TpwhFfAU7d9won10uFZssLur8NEyKTOgHxQ==,iv:TMB+zh/2wNqirXdt3PB6HjTw96iCdWml4oUz8p36zLE=,tag:GpBXiN7efwdQYL+x21j4TQ==,type:str]
+    - key: ENC[AES256_GCM,data:RtKkkyNv0zO/IezcKaBBp5Ir9mCBacgVqjFIGyq13U68sU4z5g==,iv:sFr2v6kFKOm2ID73GpxACTvQttvt7fYwg437N7D2Scg=,tag:aPCpFti/jY/0a1FEWF/g4w==,type:str]
       operator: Exists
       effect: NoSchedule
 affinity:
@@ -164,34 +164,35 @@ affinity:
             - weight: 100
               preference:
                 matchExpressions:
-                    - key: ENC[AES256_GCM,data:UIhojeyYAP4BU0b2/kcL7cJeH1w=,iv:58g0oa3Hljy8Pay1lAD3gMfKRv0cwnWqZ5Mjt1N2BPY=,tag:Eclfpi9f1qn8W/+veeoVwg==,type:str]
+                    - key: ENC[AES256_GCM,data:jW8/VevqdIAXrBAMj58udice6HM=,iv:+6nTdgB2io+H6S/jyO4Fc/+VfoyGIY+dqphi6ZNIn3c=,tag:JKJveLWX8pjMN3cnO94UwQ==,type:str]
                       operator: NotIn
                       values:
                         - "true"
 # (postgresql and valkey tolerations are set in their respective blocks above)
 sops:
-    lastmodified: "2026-08-12T22:43:19Z"
-    mac: ENC[AES256_GCM,data:ENuTFAfom5iFNpYNMwBGNmPAbWaQunLQ6IBQMbpGm/uo6Gef6ahJsn8J7nVF/IxaTsdJHl/Lq/Ql7fzj1JRystKqtibJtmHXC9b/wWMGT8xtuLdzLav58tAyxuBcitAIX2t96fyf+x/DkWbiTj1xkTYtKKrviLpxncJIVT0BXN8=,iv:+84jAHZHy4hMg2LCMk9MkH8PIrvteB4eqScUHVtmfF0=,tag:9wtBD36Y6SqrnKmIKPvzZg==,type:str]
+    lastmodified: "2026-08-26T19:28:03Z"
+    mac: ENC[AES256_GCM,data:hb8HlzvsAU+6A2C4MARpF2j+Mv55mQ25SOjJIo6inV822IskVV+0Ml9I6WS8RK6ZNZAdnVcDtQ07JlGx9QRiIwxAE0xxwuhukhSBBjeHGAc39RPhLXhDvwUF5ZeouGixkVrA5lhAvHiu9ILv241G1st0J9qK/ZaIsTazQN4X3iY=,iv:1ehf3avfeV4Ro8rw0rsFQ0qnFXrvF66tUKqqCY+NXSc=,tag:5kXUpLrLGPbwNSBC+aVIwA==,type:str]
     pgp:
-        - created_at: "2026-08-12T22:43:19Z"
+        - created_at: "2026-08-26T19:28:03Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ//VE97o+IKlovKEABfrA+z9qDySKAzb2eFvBe+vFgrCdyb
-            MIQaGvWYzYqeBT9V4AIDK32+emf36zDfhTyVT5k5bxVnft4ceXQ6biXdvt7+FVmt
-            k2/2UCD8PvqvxD1fsRsTJSvX73yXi1MsEyGK2HPKoyXky1xxzCsv9isvPvF2nlBG
-            HHqpuF2NzPVFs2gu+sZhGOSagYcxz0VZw0nyZ7n3twQnGLXVl5p/79ffqoJz9CGG
-            6kTcmxQo0v0BYRdtC/6LKuZlkYysVVg43eNluAodIPrPqbvwL51L3Nfwdjo4pNwE
-            P/B8lR6KbRS4DnI0cc9lLv1WPtDhB7WvoTbqcJWfhcK+HzzU8toh00zcYTmhhaf/
-            uckqr+bkDInbH6Fwdtng7HS8d0vfY8WGzPfnUiH0ulE6+iHeHSOC5kID/Gc57Hc3
-            4wO+wciZqPAkXChYCpUVtcjZCMNGPoJhb92Vf+8B7Zp8VatIMDY3jUCaKayjQEZL
-            25LuBLOxtqAiLhmMlFourNmIV2YiDv+6K1d6D1RRfiQhsnpnfJWygjcwy433bwph
-            1Cvx/a6k3C0wMrhociwzYP/gNWLLCxqWBvvNgFf7sWiR23swg4lO/qEjcz+HxD8d
-            U1DeF6nD2dQ629qstg1KJ5zoRKqS/JegXmbMGV6rjPkzhTqodVgaUpnmgvlstXzS
-            XgF5a+gUhNHDwL8ymKTsRejffJO/GV42vOZ66B7X3dkcXO37PuoJRCbNKbBnZAgs
-            O2wWOahTsF1bO7xZTzg0BZx68Ty/HE0ya305/C7gyKUsuOZesrOadpGF8E68xZA=
-            =/gIl
+            hQIMA7uy4qQr71wiAQ/9FF5SJAVg0dLi/+xQreE2yrxMH4GTfdBMHd3GWEVLYger
+            6XwXQ7+Qx3mxf+VprmNGOW7NdKSsC5Re/JHJAjs7p+eWohtieOgKtg7DWEcrTwZA
+            56Rnhtnh0vv2jqmv/pm/Cj49GCLTjQFY+w5azU7g/7eQZpdPezIdrs1ueiSm6LaU
+            T9bMdUzm1pb7/JKQMvzYyPcuw0AfKLlg+x7HHRNI3O434yKuTLC5emVxJEmwQvV4
+            FD6oUAt4gKLqUHvAUuCVo8O5G36MGHO/roHxlWaLbHqjaDPyWh2TGdX0ICKKq1yc
+            fJzw9dYgcwIMXpXilbnsL4gQpv6bKj6VniyCoye6ieMZ2HIoZghd+wL0NoPkS7Nj
+            D+vTcPR8HOEWoZkZ4B01+bFyTmJ5NA8Z0V3peHkuTy+HCTgwxA0Y8PCrHl3YHsCQ
+            C3nANhh+cMqtcJdvqdGrM09X8n3edNc4lf+qg2tk0NbcdVSqcFl9y/MeJOWhOOg3
+            T/bwBrI5O7aRO6gqaCebKuGIrD1PDNURW3LLiKBSU4OTYbMWWXGpdEMCkoSQS56B
+            6Uo9N8KcWhBChCMJG8hbzYRVwYgWGsHsQbfbujkcIiSaoHGy8fklflxBjtLiitLO
+            voawf0zSqyBKbf1YFAmYnrdR0jiasKC5iqtK7c8uc/HyCSvxjK0ygPloWFI8aSPS
+            XgFJiWHT/5gOG64XmDm0VoKdflpojJeTGIC5JU8RAlJgD/oq+uWt23ayJxkjbkMd
+            H7UsqcuzWfbp44MYtmEWbxvI/+Iaui5/7hW7kEzWI60Mh4tVZGIJ64A3WNRL/Xw=
+            =U5nI
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
     version: 3.10.2